Last updated: 2026-10-20

At Österlen.se and the association “För Österlen. Tillsammans!”, we care about your personal privacy. This privacy policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

Österlens Besök- och upplevelsenäring Ekonomisk förening (ÖBEF)
(Public name: Föreningen För Österlen. Tillsammans!)
Organization number: 769642-2836
Email: [email protected]
Websites: osterlen.se and osterlentillsammans.org
Registered office / Postal address:

2. What personal data do we collect and why?

We only collect data that is strictly necessary for each respective purpose:

A. Inquiries via email or contact forms

Data: Name, email address, phone number, and any details included in your message.
Purpose & Legal basis: To handle your inquiry and answer your questions (Legitimate interest).
Retention period: Stored while the case is ongoing and deleted once it is no longer needed.

B. For members, businesses, and associations (Membership & Profiles)

Data: Contact person’s name, email, phone number, billing address, and business and event details.
Purpose & Legal basis: To manage your membership, publish your profile page/events on Österlen.se, issue membership invoices (Performance of a contract), and comply with Swedish statutory bookkeeping laws (Legal obligation).
Retention period: During the active membership period, plus 7 years for invoicing and bookkeeping documentation as required by law.

C. Newsletters and updates (if subscribed)

Data: Email address.
Purpose & Legal basis: To send travel inspiration, news, and tips about Österlen (Consent).
Retention period: Until you choose to unsubscribe (via the link in the email or by contacting us).

D. Website operations and security logs

Data: IP address, browser information, and timestamps.
Purpose & Legal basis: To maintain technical operations, safeguard against cyber threats, and ensure stability (Legitimate interest).
Retention period: Server logs are typically stored for a maximum of 30 days and deleted automatically thereafter.

3. Is your data shared with third parties?

We never sell your personal data. Data is only shared with trusted service providers to the extent required to operate our organization and website:

IT and infrastructure providers: Web hosting providers, database solutions, and email services (acting as data processors under GDPR).
Finance and accounting: Accounting software and banking partners for processing membership invoices.
Public authorities: Only when legally obliged to do so by statutory requirement or official government order.

4. Cookies

This website uses cookies to ensure that essential features operate seamlessly (for example, language selection via Polylang, authenticated user sessions, and security).

Where web analytics tools are used to measure traffic, this is done to understand how visitors interact with the site and how we can further enhance the visitor experience. You can adjust your browser settings at any time to reject cookies.

5. Your rights under GDPR

You always have the right to:

Request access: Request a free copy of the personal data we hold about you.
Rectify inaccurate data: Ask us to correct inaccurate or incomplete information.
Erasure (“Right to be forgotten”): Have your personal data erased when it is no longer required for its purpose (excluding obligations under statutory retention rules such as bookkeeping legislation).
Withdraw consent: Withdraw any previously granted consent at any time (e.g. for newsletters).
Lodge a complaint: Contact the supervisory authority, the Swedish Authority for Privacy Protection (IMY), if you believe that your personal data is handled unlawfully.

6. Questions & Contact

If you have questions regarding how we process your personal data or wish to exercise your rights, you are always welcome to get in touch with us:

Email: [email protected]